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CLAIMS: 



1 . A method for defeace against at least one attack made by means of differential 
power analysis in at least one hyperelliptic cryptosystem, in particular in at least one 
hyperelliptic public key cryptosystem, which is given by at least one hyperelliptic curve (Q 
of any genus (g) over a finite field (A) in a first group, where the hyperelliptic curve (C) is 

5 given by at least one co-efiBcient, characterised in that the hyperelliptic curve (C) and/or at 
least one element of the first group, in particular at least one in particular reduced divisor 
aud/or at least one intermediate result of a scalar multiplication is randomised. 

2. A method as claimed in claim 1, characterised in that the bits of the operand to 
10 be processed and/or encoded in the hyperelliptic cryptosystem are represented by the 

hyperelliptic curve (Q, in particular by at least one co-efficient of the hyperelliptic curve (C), 
and/or by at least one base element of the cryptosystem, such as by at least one in particular 
reduced divisor and/or at least one intermediate result of a scalar multiplication. 

15 3. A method as claimed in claim 1 or 2, characterised in that at least one scalar 

multiplication in the Jacobian variation J(C)(K) of the hyperelliptic curve (C) takes place in a 
second group different from the first group and isomorphic in relation to the first group, in 
particular selected at random. 

20 4. A method as claimed in claim 3, characterised by the following steps: 

- transformation of the Jacobian variation J(C)(K) of the hyperelliptic curve 
(Q by means of at least one depiction in particular by means of at least one K- 
isomorphism, into the Jacobian variation J(C)(K) of the transformed hyperelliptic curve (C = 

25 - multiplication of the Jacobian variation J(C)(K) of the transformed 

hyperelliptic curve (C) with at least one scalar (n); and 

- back transformation of the Jacobian variation J(C)(K) multiplied by the 
scalar (n) of the transformed hyperelliptic curve (C) by means of the depiction {t^^) inverse to 
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the depiction in a Jacobian variation y^Q of the hyperelliptic curve (Q multiplied by 
scalar (n\ 

- where 

- the depiction corresponds to the transition from the first group to the 

second group 

- the inverse depiction (^^) corresponds to the transition from the second 
group to the first group. 

5. A method as claimed in at least one of claims 1 to 4, characterised by the 
following steps: 

- depiction of at least one in particular reduced divisor (D) with associated 
polynonnalpair as at least one quintuplet [Ui, Uo, Vi, Vo, Z\ in projective co-ordinates, 
where U(t) = t^ + Uit/Z+ CVZand V(t) = V2t/Z+ Vo/Z; 

- selection, in particular random selection, of at least one non-vanishing 
element (s) from the field QC); and 

- conversion of the quintuplet [Ui, Uo, Vu Vo, Z\ by means of a selected 
element (s) into the converted quintuplet [sUi, sUo, sVi, sVq, sZ\. 

6. A method as claimed in at least one of claims 1 to 4, characterised by the 
following steps: 

- depiction of at least one in particular reduced divisor (D) with associated 
polynomial pair as at least one sextuplet [Ui, Uo, Vi, Vo, Zi, Z2] in projective co-ordinates, 
where U(t) = + t/;^/Z/ + tVZ/ and V(t) = Vit/(Zi^Z^ + Vo/(Z2^Z^; 

- selection, in particular random selection, of at least two non-vanishing 

elements 

is I, S2) from the field (JC); and 

- conversion of the sextuplet [Ui, Uo, Vi, Vo, Zi, Zi[ by means of a selected 

elements 

{si, S2) into the converted sextuplet \si^Ui, si^Uo, si^S2Vi, si^S2Vo, siZi, S2Z2]. 

7. A method as claimed in any of at least one of claims 1 to 6, characterised in 
that the method is implemented on at least one microprocessor in particular allocated to at 
least one chip card and/or in particular to at least one smart card. 
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8. A microprocessor worldng according to a method as claimed in at least one of 
claims 1 to 7. 

9. A device, in particular a chip card and/or in particular a smart card, with at 
5 least one microprocessor as claimed in claim 8. 

10. Use of a method as claimed in at least one of claims 1 to 7 and/or at least one 
microprocessor as claimed in claim 8 and/or at least one device in particular at least one chip 
card aad/or at least one smart card as claimed in claim 9 in the defence against at least one 

10 attack made by means of differential power analysis on at least one hyperelliptic 
cryptosystem, in particular at least one public key cryptosystem. 



